Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/a49c5beb34041eefe85070eee34c76b4ca1538d6.roa
File:                     a49c5beb34041eefe85070eee34c76b4ca1538d6.roa (raw, json)
Hash identifier:          4GNKgbL5dvHyGv8sqwoELsqtcalFcdF/FOggJ/UtfuU=
Subject key identifier:   B2:B6:F0:21:1D:E2:B2:2A:55:2B:5D:5B:53:24:1F:63:4E:2C:CD:2C
Certificate issuer:       /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial:       210E41
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/a49c5beb34041eefe85070eee34c76b4ca1538d6.roa
Signing time:             Wed 03 May 2023 18:31:36 +0000
ROA not before:           Tue 02 May 2023 18:31:36 +0000
ROA not after:            Sat 03 May 2025 18:31:36 +0000
asID:                     265799
IP address blocks:        2803:2540:b7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166337 (0x210e41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
        Validity
            Not Before: May  2 18:31:36 2023 GMT
            Not After : May  3 18:31:36 2025 GMT
        Subject: CN=a49c5beb34041eefe85070eee34c76b4ca1538d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:29:0b:e7:9b:c3:93:43:2c:4b:61:aa:e0:3e:
                    6c:26:4b:ce:b1:a7:70:ba:14:78:26:ae:70:6d:c2:
                    19:f2:e0:a8:3f:df:70:8a:17:7e:dc:80:d4:36:81:
                    68:e7:46:9c:38:bc:8d:89:e3:06:3c:3b:34:83:6d:
                    b3:dc:a0:6a:65:0f:ae:79:55:4f:0b:6d:e7:70:be:
                    87:6b:30:d1:1c:6b:4e:4c:32:d3:30:c2:1c:5e:0e:
                    f5:2d:b4:fa:72:cc:37:6c:f6:9d:35:89:68:2a:42:
                    0a:e5:c5:b6:a3:31:05:41:e1:9c:33:9e:69:41:9c:
                    fc:cd:33:7f:80:53:44:3a:82:ee:7d:9c:a0:9b:c3:
                    30:e8:a0:1f:96:f0:9d:30:11:c2:22:27:bf:8b:6e:
                    7e:d0:57:23:4e:40:77:d6:b4:a8:ad:aa:e4:1d:19:
                    a2:09:6b:f0:fe:e1:6c:07:3b:e7:b1:45:3f:1c:c5:
                    2f:f1:cb:01:f0:56:14:68:77:94:be:c3:e7:cd:82:
                    be:86:ba:e1:9d:1f:6a:13:a3:aa:2f:ff:bf:4b:a1:
                    c7:e8:e6:80:65:4d:bc:b0:88:41:fb:ee:e1:c0:37:
                    14:7b:92:3f:4b:71:61:8d:9e:02:14:bf:55:c4:2c:
                    89:d4:02:22:6c:6f:81:1b:2b:af:a1:70:06:28:17:
                    2a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B6:F0:21:1D:E2:B2:2A:55:2B:5D:5B:53:24:1F:63:4E:2C:CD:2C
            X509v3 Authority Key Identifier:
                keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/a49c5beb34041eefe85070eee34c76b4ca1538d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2540:b7::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:8c:44:a5:41:b3:aa:b5:f3:d8:08:82:30:48:53:87:c6:75:
         93:32:b8:3f:4d:f2:37:9c:3c:13:c9:78:57:8e:fc:c7:18:51:
         37:8e:1f:1e:fa:a0:ea:2e:6e:cf:ea:38:4b:f1:c1:5b:aa:48:
         24:4e:91:b2:93:81:b1:0a:fb:b7:7e:d2:94:cb:94:41:37:11:
         25:34:a8:40:e6:94:fa:9e:62:a1:79:be:cb:bf:12:3d:70:d3:
         09:29:7b:ba:25:59:8d:54:5a:05:4c:85:00:a9:77:2d:f4:da:
         ae:4a:cd:c2:a6:09:35:32:7e:0f:9d:0b:19:a8:52:84:02:89:
         21:bb:62:fd:85:fe:a2:da:32:9e:96:e5:81:aa:ce:a4:ad:1a:
         99:32:f6:bb:b6:bd:6b:93:06:6c:2f:62:43:91:84:cb:8e:12:
         91:b7:e6:cf:7f:65:e0:b9:2f:58:3e:8b:1a:bf:84:f3:f0:52:
         af:49:be:55:74:93:d8:f6:fb:01:fc:de:ab:dd:db:09:42:ce:
         74:57:b1:8e:d1:99:9b:9b:45:4a:c9:bc:c7:f5:9e:d4:4c:98:
         d3:25:a5:cc:6a:a1:e8:1c:df:db:56:92:d2:81:ae:8f:5d:b7:
         a6:95:b5:7a:fd:20:46:f3:80:92:98:4e:87:a9:83:28:93:e9:
         26:f3:b2:89
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDIQ5BMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
M2Q2MDAyMjc2ZTIyOTUyMDBjODVhNjYxMjljNDJlNGQ0ODNjMzQwHhcNMjMwNTAy
MTgzMTM2WhcNMjUwNTAzMTgzMTM2WjAzMTEwLwYDVQQDEyhhNDljNWJlYjM0MDQx
ZWVmZTg1MDcwZWVlMzRjNzZiNGNhMTUzOGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjSkL55vDk0MsS2Gq4D5sJkvOsadwuhR4Jq5wbcIZ8uCoP99w
ihd+3IDUNoFo50acOLyNieMGPDs0g22z3KBqZQ+ueVVPC23ncL6HazDRHGtOTDLT
MMIcXg71LbT6csw3bPadNYloKkIK5cW2ozEFQeGcM55pQZz8zTN/gFNEOoLufZyg
m8Mw6KAflvCdMBHCIie/i25+0FcjTkB31rSorarkHRmiCWvw/uFsBzvnsUU/HMUv
8csB8FYUaHeUvsPnzYK+hrrhnR9qE6OqL/+/S6HH6OaAZU28sIhB++7hwDcUe5I/
S3FhjZ4CFL9VxCyJ1AIibG+BGyuvoXAGKBcqZQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLK28CEd4rIqVStdW1MkH2NOLM0sMB8GA1UdIwQYMBaAFDAh+wtyXfK860HI
D7qAy4I4YPkKMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWIzZDYw
MDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2MzNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYTI2M2RjNTctZTExYy00NjA4LTlhZjItYmRmYjE2
ZTIxNmRjL2E0OWM1YmViMzQwNDFlZWZlODUwNzBlZWUzNGM3NmI0Y2ExNTM4ZDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9hMjYzZGM1Ny1lMTFjLTQ2MDgtOWFmMi1iZGZi
MTZlMjE2ZGMvOWIzZDYwMDIyNzZlMjI5NTIwMGM4NWE2NjEyOWM0MmU0ZDQ4M2Mz
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgDJUAAtzANBgkqhkiG9w0BAQsFAAOCAQEANIxEpUGzqrXz
2AiCMEhTh8Z1kzK4P03yN5w8E8l4V478xxhRN44fHvqg6i5uz+o4S/HBW6pIJE6R
spOBsQr7t37SlMuUQTcRJTSoQOaU+p5ioXm+y78SPXDTCSl7uiVZjVRaBUyFAKl3
LfTarkrNwqYJNTJ+D50LGahShAKJIbti/YX+otoynpblgarOpK0amTL2u7a9a5MG
bC9iQ5GEy44Skbfmz39l4LkvWD6LGr+E8/BSr0m+VXST2Pb7Afzeq93bCULOdFex
jtGZm5tFSsm8x/We1EyY0yWlzGqh6Bzf21aS0oGuj123ppW1ev0gRvOAkphOh6mD
KJPpJvOyiQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:59 2024 by rpki-client on console-fra.rpki-client.org